Terrablox
GitHubStart
Module library

App Runner

Terraform module to create AWS App Runner resources

Version
v1.2.2
Repository
terrablox-aws-app-runner

Inputs

40
access_iam_role_descriptionoptionalstring

Description of the role

Defaultnull
access_iam_role_nameoptionalstring

Name to use on IAM role created

Defaultnull
access_iam_role_pathoptionalstring

IAM role path

Defaultnull
access_iam_role_permissions_boundaryoptionalstring

ARN of the policy that is used to set the permissions boundary for the IAM role

Defaultnull
access_iam_role_policiesoptionalmap(string)

IAM policies to attach to the IAM role

Default{}
access_iam_role_use_name_prefixoptionalbool

Determines whether the IAM role name (`iam_role_name`) is used as a prefix

Defaulttrue
auto_scaling_configuration_arnoptionalstring

ARN of an App Runner automatic scaling configuration resource that you want to associate with your service. If not provided, App Runner associates the latest revision of a default auto scaling configuration

Defaultnull
auto_scaling_configurationsoptionalany

Map of auto-scaling configuration definitions to create

Default{}
connectionsoptionalany

Map of connection definitions to create

Default{}
createoptionalbool

Determines whether resources will be created (affects all resources)

Defaulttrue
create_access_iam_roleoptionalbool

Determines whether an IAM role is created or to use an existing IAM role

Defaultfalse
create_custom_domain_associationoptionalbool

Determines whether a Custom Domain Association will be created

Defaultfalse
create_ingress_vpc_connectionoptionalbool

Determines whether a VPC ingress configuration will be created

Defaultfalse
create_instance_iam_roleoptionalbool

Determines whether an IAM role is created or to use an existing IAM role

Defaulttrue
create_serviceoptionalbool

Determines whether the service will be created

Defaulttrue
create_vpc_connectoroptionalbool

Determines whether a VPC Connector will be created

Defaultfalse
domain_nameoptionalstring

The custom domain endpoint to association. Specify a base domain e.g., `example.com` or a subdomain e.g., `subdomain.example.com`

Default""
enable_observability_configurationoptionalbool

Determines whether an X-Ray Observability Configuration will be created and assigned to the service

Defaulttrue
enable_www_subdomainoptionalbool

Whether to associate the subdomain with the App Runner service in addition to the base domain. Defaults to `true`

Defaultnull
encryption_configurationoptionalany

The encryption configuration for the service

Default{}
health_check_configurationoptionalany

The health check configuration for the service

Default{}
ingress_vpc_endpoint_idoptionalstring

The ID of the VPC endpoint that is used for the VPC ingress configuration

Default""
ingress_vpc_idoptionalstring

The ID of the VPC that is used for the VPC ingress configuration

Default""
instance_configurationoptionalany

The instance configuration for the service

Default{}
instance_iam_role_descriptionoptionalstring

Description of the role

Defaultnull
instance_iam_role_nameoptionalstring

Name to use on IAM role created

Defaultnull
instance_iam_role_pathoptionalstring

IAM role path

Defaultnull
instance_iam_role_permissions_boundaryoptionalstring

ARN of the policy that is used to set the permissions boundary for the IAM role

Defaultnull
instance_iam_role_policiesoptionalmap(string)

IAM policies to attach to the IAM role

Default{}
instance_iam_role_use_name_prefixoptionalbool

Determines whether the IAM role name (`iam_role_name`) is used as a prefix

Defaulttrue
instance_policy_statementsoptionalany

A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage

Default{}
network_configurationoptionalany

The network configuration for the service

Default{}
observability_configurationoptionalany

The observability configuration for the service

Default{}
private_ecr_arnoptionalstring

The ARN of the private ECR repository that contains the service image to launch

Defaultnull
service_nameoptionalstring

The name of the service

Default""
source_configurationoptionalany

The source configuration for the service

Default{}
tagsoptionalmap(string)

A map of tags to add to all resources

Default{}
vpc_connector_nameoptionalstring

The name of the VPC Connector

Default""
vpc_connector_security_groupsoptionallist(string)

The security groups to use for the VPC Connector

Default[]
vpc_connector_subnetsoptionallist(string)

The subnets to use for the VPC Connector

Default[]

All 40 are optional — the module deploys with none of them set.

Outputs

24
access_iam_role_arn

The Amazon Resource Name (ARN) specifying the IAM role

access_iam_role_name

The name of the IAM role

access_iam_role_unique_id

Stable and unique string identifying the IAM role

auto_scaling_configurations

Map of attribute maps for all autoscaling configurations created

connections

Map of attribute maps for all connections created

custom_domain_association_certificate_validation_records

A set of certificate CNAME records used for this domain name

custom_domain_association_dns_target

The App Runner subdomain of the App Runner service. The custom domain name is mapped to this target name. Attribute only available if resource created (not imported) with Terraform

custom_domain_association_id

The `domain_name` and `service_arn` separated by a comma (`,`)

instance_iam_role_arn

The Amazon Resource Name (ARN) specifying the IAM role

instance_iam_role_name

The name of the IAM role

instance_iam_role_unique_id

Stable and unique string identifying the IAM role

observability_configuration_arn

ARN of this observability configuration

observability_configuration_latest

Whether the observability configuration has the highest `observability_configuration_revision` among all configurations that share the same `observability_configuration_name`

observability_configuration_revision

The revision of the observability configuration

observability_configuration_status

The current state of the observability configuration. An `INACTIVE` configuration revision has been deleted and can't be used. It is permanently removed some time after deletion

service_arn

The Amazon Resource Name (ARN) of the service

service_id

An alphanumeric ID that App Runner generated for this service. Unique within the AWS Region

service_status

The current state of the App Runner service

service_url

A subdomain URL that App Runner generated for this service. You can use this URL to access your service web application

vpc_connector_arn

The Amazon Resource Name (ARN) of VPC connector

vpc_connector_revision

The revision of VPC connector. It's unique among all the active connectors ("Status": "ACTIVE") that share the same Name

vpc_connector_status

The current state of the VPC connector. If the status of a connector revision is INACTIVE, it was deleted and can't be used. Inactive connector revisions are permanently removed some time after they are deleted

vpc_ingress_connection_arn

The Amazon Resource Name (ARN) of the VPC Ingress Connection

vpc_ingress_connection_domain_name

The domain name associated with the VPC Ingress Connection resource

What the agent wires into the next module. An edge on the architecture diagram is one of these consumed by something else.